PA-400 Series Front Panel..................... 14 PA-400 Series Back Panel.......................29 Install the PA-400 Series Firewall............... 33 Install the PA-400 Series Firewall on a Flat Surface............34 Install the PA-400 Series Firewall on a Wall..............36 Install the PA-400 Series Firewall in a 19-inch Equipment Rack........44 Install the PA-400 Series Firewall Using the PAN-PA-400-RACKTRAY...44...
Before You Begin Read the following topics before you install or service a Palo Alto Networks next-generation ® firewall or appliance.The following topics apply to all Palo Alto Networks firewalls and appliances except where noted. • Upgrade/Downgrade Considerations for Firewalls and Appliances •...
Page 11
à accès limité uniquement. Une zone à accès limité correspond à une zone dans laquelle l’accès n’est autorisé au personnel (de service) qu'à l'aide d'un outil spécial, PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
(HA), 5G capability for select models, and Power Over Ethernet (PoE) support in the PA-415 and PA-445. All PA-400 Series firewalls except for the PA-410 can make use of dual power adapters for power redundancy (second power adapter sold separately). The PA-400 Series firewall enables you to secure your organization through advanced visibility and control of applications, users, and content.
PA-400 Series Firewall Overview PA-400 Series Front Panel View the front panel components of your PA-400 Series firewall. • PA-410 • PA-415-5G • PA-415 and PA-445 • PA-455 • PA-455-5G • PA-440, PA-450, and PA-460 The following image shows the front panel of the PA-410 and the table describes each front panel component.
Page 19
Description components (see Interpret the LEDs on a PA-400 Series Firewall). The front panels of the PA-415 and PA-445 firewalls are visually different but feature the same components. The following image shows the front panel of the PA-415 and the table describes each front panel component.
Page 21
Three LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-400 Series Firewall). The following image shows the front panel of the PA-455 and the table describes each front panel component. PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Page 22
Description LED status indicators Four LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-400 Series Firewall). USB port USB port for debugging and administration only. Use this port to bootstrap the firewall.
Page 24
LED status indicators Eight LEDs that indicate the status of the firewall hardware components (see Interpret the LEDs on a PA-400 Series Firewall). SIM slot cover After removing the slot cover, install up to two nano SIMs to enable mobile network connectivity.
Page 28
(see Interpret the LEDs on a PA-400 Series Firewall). To view system firmware versions for any of the PA-400 Series firewalls, use the following CLI command: admin@PA-400> show system firmware PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
PA-400 Series Firewall Overview PA-400 Series Back Panel View the back panel components of your PA-400 Series firewall. • PA-410 • PA-415-5G • PA-415 and PA-445 • PA-455 • PA-455-5G • PA-440, PA-450, and PA-460 The following image shows the back panel of the PA-410 and the table describes each back panel component.
Page 31
The back panels of the PA-440, PA-450, and PA-460 firewalls are identical. The following image shows the back panel of the PA-440 and the table describes each back panel component. PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Page 32
Use only the PA-400 Series external power adapters provided by Palo Alto Networks. To view system firmware versions for any of the PA-400 Series firewalls, use the following CLI command: admin@PA-400> show system firmware PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Install the PA-400 Series Firewall The PA-400 Series next-generation firewall ships with the hardware required to install the firewall on a flat surface or on a wall. For select models, you can also order a rack mount kit to install the firewall in a 19-inch equipment rack.
Install the PA-400 Series Firewall Install the PA-400 Series Firewall on a Flat Surface The PA-440, PA-450, and PA-460 firewalls ship with rubber “feet” attached to each corner of the device. As pictured below, the PA-440, PA-450, and PA-460 can be situated on a flat surface both horizontally and vertically.
Install the PA-400 Series Firewall Install the PA-400 Series Firewall on a Wall Install a PA-400 Series firewall on a drywall or plywood wall using the wall-mount kit as described in the following procedure. If you have a firewall that supports multi-band antennas, make sure that you read how to install antennas on the 5G firewall before continuing with this procedure.
Page 39
Next, loop the two Velcro straps through the side openings on the wall mount and over the power PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Page 40
Make sure to align the cable tie with the notches in the bracket to prevent the power cord from falling out. Next, loop the two Velcro straps through the side openings on PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Install the PA-400 Series Firewall Install the PA-400 Series Firewall in a 19-inch Equipment Rack The PAN-PA-400-RACKTRAY enables you to install one or two PA-440, PA-450, or PA-460 firewalls in a four-post 19" rack. The installation hardware consists of a metal base and two rails that can be expanded to include up to two firewalls and two PSUs.
Page 50
Slide the mounting tray into the rails previously fixed to the equipment rack. Stop when the front flange on the mounting tray is flush with the front of the rail. PA-400 Series Next-Gen Firewall Hardware Reference 2025 Palo Alto Networks, Inc.
Install the PA-400 Series Firewall Install Antennas on the PA-400 Series 5G Firewall The PA-415-5G and PA-455-5G firewalls support four multi-band antennas. The following procedure describes how to install the to the four antenna SMA (F) connectors on the firewall.
Install the PA-400 Series Firewall Insert a SIM Card into a PA-400 Series Firewall The PA-415-5G and PA-455-5G firewalls support two nano SIM slots to enable mobile network connectivity. STEP 1 | Remove the SIM cover. PA-415-5G The SIM cover is on the back of the firewall. Unfasten the two M3 screws on the SIM cover using a type one Phillips screwdriver.
Overview. You can also ™ bring the PA-400 Series firewall online in standard mode. See the instructions below to learn how to boot in ZTP or standard mode. If you have already booted up the firewall and selected the wrong mode, you must perform a factory reset or private-data-reset before continuing.
Page 59
Install the PA-400 Series Firewall STEP 4 | Power on the firewall. See Connect Power to a PA-400 Series Firewall to learn how to connect power to the firewall. • (Standard mode) Using your terminal emulator, watch for the following CLI prompt as the...
Connect Power to a PA-400 Series Firewall All PA-400 Series firewalls, except for the PA-455-5G, are powered by an external power adapter that converts an AC power source to DC power. The PA-455-5G firewalls operates on AC power. All firewalls, except for the PA-410, support power redundancy.
Connect Power to a PA-400 Series Firewall Connect Power to a PA-400 Series Firewall The following procedure describes how to connect power to a PA-415, PA-415-5G, PA-440, PA-445, PA-450, PA-455, PA-455-5G, and PA-460 firewall. • The PA-415, PA-415-5G, PA-440, PA-445, PA-450, PA-455, and PA-460 firewalls use DC power.
Page 63
Connect Power to a PA-400 Series Firewall STEP 3 | Connect the connector from the power adapter into the PWR 1 port on the firewall and tighten the connector nut to secure the cable to the firewall. The power adapter inputs for the PA-440, PA-450, and PA-460 are on the back panel of the device.
Page 64
Connect Power to a PA-400 Series Firewall STEP 5 | (Optional for PA-415, PA-415-5G, PA-440, PA-445, PA-455-5G, PA-450, and PA-460) Plug the connector from a second power adapter (purchased separately) into the PWR 2 port and plug the connector into a power source.
Connect Power to a PA-400 Series Firewall Connect Power to a PA-410 Firewall The following procedure describes how to connect power to a PA-410 firewall. To avoid injury to yourself or damage to your Palo Alto Networks hardware or the data ®...
Service the PA-400 Series Firewall Hardware The following topics describe how to interpret the PA-400 Series status LEDs and how to replace a PA-400 Series power adapter. The power adapter is the only serviceable component on the PA-400 Series firewall.
Service the PA-400 Series Firewall Hardware Interpret the LEDs on a PA-400 Series Firewall The following table describes how to interpret the status LEDs on the PA-400 Series firewalls. The PA-410, PA-415, and PA-445 firewall only have PWR, STAT, and ALM front panel LEDs.
Page 69
Service the PA-400 Series Firewall Hardware Description PA-455-5G, and PA-445) TEMP • Green—The firewall temperature is normal. (Temperature) • Yellow—The firewall temperature is outside tolerance levels. • (PA-410, PA-440, • Green—The firewall is powered on. PA-450, and • Off—The firewall is not powered on or an error has occurred...
Page 70
Service the PA-400 Series Firewall Hardware Description (PA-415-5G and • Off—The modem is disabled. PA-455-5G only) The PA-455-5G has two cellular LEDs — 1 and 2. Each corresponds to one of two active 5G modems in the firewall. Ethernet port LEDs •...
The PA-410 can only operate on one power adapter. The CLI cannot be used to determine the status of the PA-400 Series firewalls power adapter. To manually interpret the status of the power adapter, verify that your power cable connections are secure and that the LED on the power adapter is on.
Page 72
Pull the cable away from the firewall to remove it. The power adapter inputs for the PA-440, PA-450, and PA-460 are on the back panel of the device. The power adapter inputs for the rest of the PA-400 Series firewalls are on the front panel of the device.
Page 73
Service the PA-400 Series Firewall Hardware STEP 2 | Connect a new power adapter. (PA-415, PA-415-5G, PA-440, PA-445, PA-450, PA-455, PA-455-5G, and PA-460) Connect the DC connector from the new power adapter to the power input (PWR 1 or PWR 2) port on the firewall and, if applicable, tighten the connector nut to secure the cable to the firewall.
PA-400 Series Firewall Specifications The following topics describe the PA-400 Series firewall hardware specifications. For feature, capacity, and performance information, refer to the datasheet. • Physical Specifications • Electrical Specifications • Environmental Specifications • Antenna Specifications • Miscellaneous Specifications...
PA-400 Series Firewall Specifications Physical Specifications The following table describes PA-400 Series firewall physical specifications. Specification Value Rack units and dimensions PA-410 • Height: 1.73”, Width: 9.53”, Depth: 6.60” (Height: 4.39 cm, Width: 24.21 cm, Depth: 16.76 cm) PA-415 and PA-415-5G •...
PA-400 Series Firewall Specifications Electrical Specifications The following table describes PA-400 Series firewall electrical specifications. Specification Value Power adapter The PA-400 Series firewalls operate on DC power (except for the PA-455-5G, which operates on AC power) that is provided by the external power adapter (provided).
PA-400 Series Firewall Specifications Environmental Specifications The following table describes PA-400 Series firewall environmental specifications. Specification Value Operating temperature range PA-410, PA-440, PA-450, PA-455, PA-455-5G, and PA-460 • 32°F to 104°F (0° to 40°C) PA-415, PA-415-5G, and PA-445 • 32°F to 113°F (0° to 45°C) Non-operating temperature •...
PA-400 Series Firewall Specifications Antenna Specifications The following table describes the PA-400 Series firewall antenna specifications. Specification Value Antennas PA-415-5G and PA-455-5G • Four 5G multi-band antennas 5G NR Sub-6GHz (FR1): n2, n3, n5, n66, n71, Supported radio frequency (RF) bands...
PA-400 Series Firewall Specifications Miscellaneous Specifications The following table describes PA-400 Series firewall miscellaneous specifications. Specification Value Storage capacity PA-415, PA-415-5G, PA-440, PA-445, PA-450, PA-455, PA-455-5G, and PA-460 • One 128 GB eMMC PA-410 • One 64 GB eMMC Mean time between failures (MTBF)
Our products meet standards for product safety and electromagnetic compatibility when used for their intended purpose.To view compliance statements for the PA-400 Series firewall, see PA-400 Series Firewall Compliance Statements...
PA-400 Series Firewall Compliance Statements Overview PA-400 Series Firewall Compliance Statements The following lists the PA-400 Series firewall hardware compliance statements: • BSMI EMC Statement: (PA-415 and PA-445) This is a Class A product. When used in a residential environment it may cause radio interference. In this case, the user will be required to take adequate measures.
Page 85
PA-400 Series Firewall Compliance Statements Overview • KCC: This equipment is an electromagnetic compatible device for business purposes (Class A). The provider or user should be aware that the equipment is intended for use outside the home. • TUV: Product Ambient Temperature: •...
Page 86
PA-400 Series Firewall Compliance Statements Overview television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: • Increase the separation between the equipment and receiver.
Need help?
Do you have a question about the PA-440 and is the answer not in the manual?
Questions and answers